Instructs the UA to “sandbox” the
iframe
by disallowing/disabling various features, and then
(optionally) re-allowing/re-enabling particular features.

The presence of this attribute—even if no value is given
(that is, the attribute is specified using
empty attribute syntax)
or even if the value consists only of
space characters—instructs the UA to
enforce all the following default sandbox restrictions: